On Fri, Jul 3, 2026 at 1:45 PM Paul Wouters <[email protected]> wrote: > > On Thu, 2 Jul 2026, Simon Josefsson wrote: > > > Brainpool curves and ShangMi ciphers for TLS were published as > > ISE submissions > > Note that Brainpool curves had their own crypto war between proponents and > the same cryptographer in CFRG that got so toxic, most of the brainpool > proponents left IETF forever and might have even reduced participation > of a big OS vendor in general. I wouldn't mention it as a good example > of how IETF evaluates and publishes documents.
It's important to note that X25519 was actually protecting billions of connections and Brainpool was not due to significant inefficiency, there were no legitimate security reasons for Brainpool, For some reason IETF leadership decided specifying what people were actually running would be bad, and instead we needed a beauty contest. DJB was not the best of my recollection an active participant in the discussions around Brainpool. However, if people want to try to use political methods to get inferior technology working, rather than convincing people with actual needs, I suggest their no longer participating is a good thing. Sincerely, Watson > > The ShangMi ciphers were not the result of a multi-year public > cryptographic evaluation program, and can hardly be equated to the efforts > of the NIST competition, so their path via the ISE makes total sense as > the circumstances are completely different from MLKEM. > > Paul > > _______________________________________________ > TLS mailing list -- [email protected] > To unsubscribe send an email to [email protected] -- Astra mortemque praestare gradatim _______________________________________________ TLS mailing list -- [email protected] To unsubscribe send an email to [email protected]
